Forum Discussion

RNalivaika's avatar
RNalivaika
Iron Contributor
Feb 28, 2020
Solved

Exchange Online AntiPhish

Hi all, Does anybody have a good explanation why some seemingly random messages from legit senders get marked as phishing ? these messages get sent to junk folder, as defined by phishing policy, and...
  • RNalivaika's avatar
    Mar 19, 2020

    Posting some comments regarding this question, in case somebody else bumps into that.

    Examining some sample message headers shows that they were marked as spoofing by Mailbox Intelligence in AntiPhish policy.

    After disabling Mailbox Intelligence, the amount of legit messages marked as spoofing was dramatically reduced, but still some new messages get marked as spoof (CAT:GIMP), although Mailbox Intelligence has been disabled several days ago. Have yet to find answer to that. BR, Ruslan

Resources